fix(deps): upgrade OpenTelemetry deps to resolve audit alerts

CHANGELOG.md

@@ -7,6 +7,7 @@
 #### Other Changes
 
 - Updated `@azure/monitor-opentelemetry`, `@azure/identity`, and `@opentelemetry/*` dependencies.
+- Bumped `@opentelemetry/*` (0.220 / 2.9) and `@azure/monitor-opentelemetry` to resolve dependency audit alerts.
 - Removed the legacy `@azure/functions-old` (v3) dependency.
 - Resolve vulnerabilities in dependencies.
 

package.json

@@ -70,20 +70,20 @@
     "@azure/monitor-opentelemetry": "^1.18.1",
     "@azure/monitor-opentelemetry-exporter": ">=1.0.0-beta.41 <1.0.0-c || ^1.0.0",
     "@azure/opentelemetry-instrumentation-azure-sdk": "^1.0.0-beta.7",
-    "@opentelemetry/api": "^1.9.0",
-    "@opentelemetry/api-logs": "^0.218.0",
-    "@opentelemetry/core": "^2.7.1",
-    "@opentelemetry/exporter-logs-otlp-http": "^0.218.0",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",
-    "@opentelemetry/exporter-metrics-otlp-proto": "^0.218.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
-    "@opentelemetry/otlp-exporter-base": "^0.218.0",
-    "@opentelemetry/resources": "^2.7.1",
-    "@opentelemetry/sdk-logs": "^0.218.0",
-    "@opentelemetry/sdk-metrics": "^2.7.1",
-    "@opentelemetry/sdk-trace-base": "^2.7.1",
-    "@opentelemetry/sdk-trace-node": "^2.7.1",
-    "@opentelemetry/semantic-conventions": "^1.38.0",
+    "@opentelemetry/api": "^1.9.1",
+    "@opentelemetry/api-logs": "^0.220.0",
+    "@opentelemetry/core": "^2.9.0",
+    "@opentelemetry/exporter-logs-otlp-http": "^0.220.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.220.0",
+    "@opentelemetry/exporter-metrics-otlp-proto": "^0.220.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.220.0",
+    "@opentelemetry/otlp-exporter-base": "^0.220.0",
+    "@opentelemetry/resources": "^2.9.0",
+    "@opentelemetry/sdk-logs": "^0.220.0",
+    "@opentelemetry/sdk-metrics": "^2.9.0",
+    "@opentelemetry/sdk-trace-base": "^2.9.0",
+    "@opentelemetry/sdk-trace-node": "^2.9.0",
+    "@opentelemetry/semantic-conventions": "^1.43.0",
     "diagnostic-channel": "1.1.1",
     "diagnostic-channel-publishers": "1.0.8"
   },

src/logs/exceptions.ts

@@ -24,7 +24,7 @@ export class AutoCollectExceptions {
     private _client: LogApi;
     private _tokens: number = EXCEPTION_RATE_LIMIT_CAPACITY;
     private _lastRefillTime: number = Date.now();
-    private _suppressedCount: number = 0;
+    private _suppressedCount = 0;
 
     constructor(client: LogApi) {
         this._client = client;

src/main.ts

@@ -101,7 +101,7 @@ function _getOtlpSpanExporter(internalConfig: ApplicationInsightsConfig): SpanPr
 function _getOtlpLogExporter(internalConfig: ApplicationInsightsConfig): BatchLogRecordProcessor {
     if (internalConfig.otlpLogExporterConfig?.enabled) {
         const otlpLogExporter = new OTLPLogExporter(internalConfig.otlpLogExporterConfig);
-        const otlpLogProcessor = new BatchLogRecordProcessor(otlpLogExporter);
+        const otlpLogProcessor = new BatchLogRecordProcessor({ exporter: otlpLogExporter });
         return otlpLogProcessor;
     }
 }

src/shim/telemetryClientProvider.ts

@@ -117,15 +117,15 @@ export class TelemetryClientProvider {
         const processors: LogRecordProcessor[] = [];
         try {
             const exporter = new AzureMonitorLogExporter(this._options.azureMonitorExporterOptions);
-            processors.push(new BatchLogRecordProcessor(exporter));
+            processors.push(new BatchLogRecordProcessor({ exporter }));
         } catch (error) {
             diag.error("Failed to configure Azure Monitor log exporter", error);
         }
 
         if (this._options.otlpLogExporterConfig?.enabled) {
             try {
                 const otlpExporter = new OTLPLogExporter(this._options.otlpLogExporterConfig);
-                processors.push(new BatchLogRecordProcessor(otlpExporter));
+                processors.push(new BatchLogRecordProcessor({ exporter: otlpExporter }));
             } catch (error) {
                 diag.error("Failed to configure OTLP log exporter", error);
             }

test/unitTests/logs/console.tests.ts

@@ -21,7 +21,7 @@ describe("AutoCollection/Console", () => {
         logs.disable();
         memoryLogExporter = new InMemoryLogRecordExporter();
         const loggerProvider = new LoggerProvider({
-            processors: [new SimpleLogRecordProcessor(memoryLogExporter)],
+            processors: [new SimpleLogRecordProcessor({ exporter: memoryLogExporter })],
         });
         logs.setGlobalLoggerProvider(loggerProvider);
     });